Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: MbbDC+Vgm5qek7qc0gHnNjSUcO9VQb+Rk5h9dQ16EIA=
Subject key identifier: 54:17:61:37:7B:2E:B0:A8:31:26:39:9F:52:62:85:5A:08:73:D0:67
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 0197B70E84A39E3D59A4644C93AABA15A79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 095C
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: INk3L8uIwdxUcLoC0qGzq5nHONoFdZ5BCodAeBMyUU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:84:a3:9e:3d:59:a4:64:4c:93:aa:ba:15:a7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=541761377b2eb0a83126399f5262855a0873d067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:6d:a2:c5:d6:b8:f3:6b:c7:f2:d1:bf:d1:
77:7f:57:f8:b7:a5:cb:90:a0:66:ea:d4:ef:18:a1:
be:d0:6c:02:21:a4:b4:4d:1a:92:ca:78:c7:b9:e6:
93:37:04:26:25:b8:1c:97:e3:c3:af:f3:d3:5f:81:
83:d4:8c:e2:4c:ff:84:49:02:a0:b4:80:ef:55:89:
ee:e7:5b:92:aa:74:a2:d2:ca:85:69:40:91:f4:23:
1c:76:8c:f9:ff:24:e5:c7:0e:c7:31:e3:6b:38:29:
62:f7:b7:8d:ff:e8:fd:03:64:56:5e:ad:a8:a3:a0:
36:0b:02:f8:09:9b:04:f2:ea:14:7d:08:44:06:4e:
10:fb:de:8e:c9:45:09:05:d2:50:ab:91:02:4d:1e:
b9:40:74:f0:7d:67:b7:e3:2f:e6:bc:e4:a6:66:15:
3d:dc:b9:04:6e:86:f3:c5:a8:b5:9b:a3:1a:3c:aa:
62:4f:ac:d8:28:05:43:e6:7e:b4:04:88:38:74:b7:
56:c7:58:57:c8:68:c4:c0:d9:e0:95:90:cc:94:19:
c0:6e:68:5c:e1:c2:a5:0c:af:f4:e4:5e:0c:cc:9d:
09:06:eb:f3:ce:36:14:f2:7f:19:72:b0:c1:ab:6a:
49:03:2b:43:d6:16:2c:2a:f0:db:30:5c:ea:df:44:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:61:37:7B:2E:B0:A8:31:26:39:9F:52:62:85:5A:08:73:D0:67
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:34:50:84:5b:71:d2:ba:4e:c3:7e:c6:3c:a5:7e:58:fd:e8:
26:20:6c:80:0e:96:df:93:e7:4a:00:c1:39:70:1b:fc:3c:e9:
6b:dd:51:c8:45:0c:09:82:16:32:cc:8a:41:be:a5:a7:62:d0:
a0:cb:f7:68:78:26:6a:95:74:48:de:2a:e2:46:b1:18:4b:61:
63:2e:85:19:25:a8:bd:e5:d1:8a:45:f4:4a:9d:6b:16:9a:a3:
a9:83:86:04:9c:83:d1:c9:b5:33:f3:ea:94:c8:58:01:14:86:
3b:a4:b6:85:1c:cb:b2:3b:d7:a2:5b:14:a0:ba:ed:79:a3:ab:
08:08:2f:16:be:ec:1c:80:43:6f:37:86:be:68:87:00:48:78:
b5:f4:aa:bb:04:a2:59:d3:85:41:ef:87:da:79:73:5d:ac:9d:
6c:f0:0e:d6:83:ce:4b:d1:55:20:04:13:d8:98:ed:63:09:59:
43:d4:8f:d7:cf:f9:7d:bf:35:72:90:df:be:2a:c3:74:69:e9:
90:2d:ad:cf:24:eb:5c:ef:79:be:0c:35:81:de:3e:b9:64:4b:
19:1c:b1:eb:04:3f:e4:14:5d:e3:d3:2f:6d:3d:4c:c6:b4:e9:
75:ed:61:19:6f:69:bc:1f:e3:73:3d:50:30:20:78:5c:17:fe:
52:68:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:57 2025 by rpki-client